Add workflow permissions

Author: ffried

.github/workflows/deploy.yml

@@ -5,6 +5,9 @@ on:
     branches: [ main ]
     paths-ignore: [ 'dist/*.js' ]
 
+permissions:
+  contents: write
+
 jobs:
   deploy-action-code:
     name: Deploy Action Code

.github/workflows/tag-update.yml

@@ -4,6 +4,9 @@ on:
   release:
     types: [ published ]
 
+permissions:
+  contents: write
+
 jobs:
   update-tags:
     if: ${{ !github.event.release.prerelease }}

.github/workflows/tests.yml

@@ -9,6 +9,11 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+  pull-requests: read
+#  packages: read
+
 jobs:
   test-gh-registry:
     name: Test GitHub Registry